Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB9FCDBC7E4011EFAA5F8F41762E951A.roa
File: CB9FCDBC7E4011EFAA5F8F41762E951A.roa (raw, json)
Hash identifier: iSr/g7qTrquf3gDtDiZI56SOqnW8SsWvUcv+kRl7TdQ=
Subject key identifier: FC:D8:CC:D1:F3:83:58:C6:1E:69:69:A6:A4:E0:B5:98:63:E8:6C:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BCAC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB9FCDBC7E4011EFAA5F8F41762E951A.roa
Signing time: Sun 29 Sep 2024 08:57:03 +0000
ROA not before: Sun 29 Sep 2024 08:56:59 +0000
ROA not after: Mon 30 Dec 2024 08:56:59 +0000
asID: 17561
IP address blocks: 156.241.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48300 (0xbcac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 08:56:59 2024 GMT
Not After : Dec 30 08:56:59 2024 GMT
Subject: CN=66f9165f-a107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:9f:e7:1d:50:54:91:68:f8:c2:83:b0:10:
17:e4:1d:a6:8d:87:85:ce:31:69:57:01:d4:a6:14:
ca:81:e5:22:08:16:6d:ea:52:b1:ee:6c:9f:2e:e7:
6a:5b:7a:a3:6b:bd:6d:d9:90:65:00:2d:0d:9d:2d:
b8:1a:55:9c:82:f3:da:5e:45:a4:36:bc:61:49:82:
76:f3:ad:85:6b:80:52:3b:7d:82:06:fd:10:28:96:
e2:52:04:f0:40:71:c4:8c:01:4f:3a:5b:24:24:76:
1a:b0:f9:8b:83:31:ad:d2:e2:8e:33:76:89:69:a9:
4d:93:82:1d:65:df:75:18:ab:09:3b:a8:2c:03:9e:
7f:3e:b4:88:f1:e6:2c:8e:79:e0:43:83:bf:d6:bb:
f6:ef:d8:12:df:62:ab:41:36:d0:a7:07:e6:11:e2:
7f:4c:bf:18:9d:00:42:fb:33:94:70:87:97:f0:0e:
04:3f:72:25:46:56:ef:2d:40:b5:49:40:d4:2a:a6:
0f:84:2d:b4:91:75:58:d7:54:b5:e8:6c:a3:70:ca:
5a:66:75:a1:42:7e:ff:53:02:8d:3f:99:bb:83:f4:
81:f7:2b:ff:02:5b:e5:c5:74:0f:86:ad:20:de:bb:
89:dd:b3:02:41:44:0c:43:b9:db:21:86:59:c1:90:
fd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D8:CC:D1:F3:83:58:C6:1E:69:69:A6:A4:E0:B5:98:63:E8:6C:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB9FCDBC7E4011EFAA5F8F41762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.56.0/24
Signature Algorithm: sha256WithRSAEncryption
61:9e:92:61:14:a9:30:82:fa:4a:d3:59:f9:bd:c0:b5:b0:9a:
f7:4f:4b:0c:50:14:ce:cc:76:46:4c:e4:8d:2b:10:c8:90:34:
06:76:a4:29:99:4b:f5:18:01:58:b0:a7:a6:dd:af:12:8b:38:
4e:9e:68:47:76:d6:fb:75:42:3a:6f:d6:aa:77:62:a4:c5:a5:
14:45:48:fa:9f:82:c7:f9:bb:ca:1f:40:37:0b:41:51:e5:6a:
6d:24:7e:2f:e3:4c:73:45:d9:25:05:e9:65:83:1d:61:2f:e6:
e9:7c:7f:ff:6b:10:a2:16:24:f6:2d:53:07:26:3b:ff:63:44:
c3:6e:3e:15:12:68:31:17:b9:11:71:e1:5a:a2:1b:77:d4:91:
d4:b9:2e:5e:5a:35:da:6d:d1:57:0c:5d:73:56:d2:85:8d:ba:
d7:59:4c:aa:97:64:09:69:2b:da:03:e0:19:25:c4:39:63:cb:
5a:65:6a:e6:4e:b5:3b:81:d0:fd:ec:8e:5f:17:0a:f3:c4:74:
8c:99:94:24:a8:f2:2e:f2:6c:eb:de:16:58:d8:7c:e2:e6:f2:
ca:30:90:27:8d:97:b6:cf:a6:5e:1b:73:ca:5c:14:d7:c8:f3:
e2:9e:1e:e6:18:f6:5e:fc:99:9a:ed:0e:c2:c2:a8:c4:94:67:
1b:09:12:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:50 2024 by rpki-client on console-ams.rpki-client.org